Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EE48NlHl1-CQSNPmVJndAznti9w.roa
File: EE48NlHl1-CQSNPmVJndAznti9w.roa (raw, json)
Hash identifier: K3wR6O3rBg7UPH9ZnX/+zTlwc/1F0TmDnfdlcw6O2sk=
Subject key identifier: 10:4E:3C:36:51:E5:D7:E0:90:48:D3:E6:54:99:DD:03:39:ED:8B:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AAC1BFEE8EA2D610B9AF52825270003BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EE48NlHl1-CQSNPmVJndAznti9w.roa
Signing time: Tue 19 Sep 2023 06:23:50 +0000
ROA not before: Tue 19 Sep 2023 06:23:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 195.178.110.0/24 maxlen: 24
195.178.111.0/24 maxlen: 24
45.8.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:1b:fe:e8:ea:2d:61:0b:9a:f5:28:25:27:00:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 19 06:23:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=104e3c3651e5d7e09048d3e65499dd0339ed8bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:31:d0:d7:03:69:67:83:ce:5b:0e:60:3a:
cf:b4:dd:bb:e9:8b:f7:ab:f1:49:88:07:a8:09:25:
26:1a:9a:59:ef:bd:62:b3:89:49:3d:f8:ab:d6:5c:
9b:8b:41:0a:14:58:b6:35:c7:14:3a:f9:0d:53:bf:
12:7e:9c:67:fa:05:d0:09:9a:5d:b2:71:a1:63:3b:
96:a4:1b:da:9b:7f:87:6c:55:12:68:61:bd:67:b3:
03:ea:0c:55:04:ea:60:d7:71:a7:8b:e0:ac:c4:d6:
0e:2d:b1:8f:79:f5:c0:e7:f2:94:90:50:ba:47:86:
57:7f:69:09:5c:31:39:38:62:4f:b3:fa:ab:4a:10:
bf:5f:a1:d4:e1:f6:f6:37:8f:16:53:c4:20:d5:15:
79:cb:e1:f7:6d:9d:82:2c:7e:cd:90:7e:cf:18:9d:
e2:44:b1:64:cd:03:d2:04:0f:e8:56:e9:a9:0e:98:
2d:b1:d0:ae:63:da:de:03:8f:87:30:e3:48:03:01:
b0:9e:7a:99:c9:10:14:60:f4:79:11:10:a9:be:16:
61:5f:36:29:23:85:2b:2e:86:98:ca:b2:4c:45:7f:
8c:89:ce:62:99:29:08:60:17:a3:8d:42:b6:fd:a4:
2a:5c:05:2b:d4:eb:ff:c8:fb:8c:91:ce:86:1a:2f:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:3C:36:51:E5:D7:E0:90:48:D3:E6:54:99:DD:03:39:ED:8B:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EE48NlHl1-CQSNPmVJndAznti9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
195.178.110.0/23
Signature Algorithm: sha256WithRSAEncryption
31:cb:ab:c7:3f:02:32:6b:16:b6:5b:cb:78:2a:27:67:02:f1:
a0:8a:0a:ca:4d:16:43:af:f1:4f:f6:5e:b0:d9:99:62:49:8f:
d0:32:6e:c4:b6:20:ab:7e:d2:8f:43:01:a8:76:07:a9:62:5d:
c5:51:9f:d3:c5:1c:85:7e:0c:68:31:68:de:6c:f8:5f:2a:26:
88:a1:85:c9:be:dd:05:36:24:8a:31:2d:33:24:b4:0c:70:f0:
38:cd:05:01:9f:4c:6f:17:40:e7:2b:ec:2c:3a:c9:22:ad:f1:
3c:3d:ba:a2:65:96:9b:60:4e:87:4f:99:0f:b9:fb:b1:a0:bb:
3a:2b:88:80:52:5a:84:78:33:97:1e:90:c5:b1:07:3c:9f:6a:
cb:18:ca:bf:70:71:df:46:66:0f:15:63:84:8c:d6:e2:29:58:
e7:01:1c:c6:5f:c6:39:b9:27:c0:2f:c9:cc:07:21:8b:df:50:
39:a7:ce:a0:80:34:52:47:26:d7:ac:09:30:fd:db:f0:47:b1:
15:48:0c:39:eb:35:e4:bd:b8:46:62:76:46:3e:d9:0a:85:73:
db:53:1f:d6:d2:0a:68:61:6e:db:7c:2f:3b:65:03:8d:07:41:
bd:d7:e3:61:a0:53:8d:05:d0:ff:97:36:1d:99:2f:64:21:9c:
bd:c4:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 14:52:17 2023 by rpki-client on console-ams.rpki-client.org